SHIPPENSBURG - Information of more than 50,000 Orrstown Bank customers was exposed to outside sources after the organization said two employees' were victims of an email phishing attack this summer, according to a news release.

The company said it discovered the incident on July 19, which affected individuals and businesses whose information was accessible through the email accounts. The Orrstown security team immediately terminated the attacker's access to the accounts, and reviewed all of the bank systems.

Law enforcement was also contacted, and the bank hired forensic experts who conducted an investigation to determine the scope of the incident. In addition, they identified what information was included in the emails.

None of the bank's other systems or operations were impacted, including its core systems and computer firewall, and the incident was contained to the information in the two email accounts, the release stated.

Orrstown said not all customers were impacted by the attack, and it is offering those who were free identity and credit monitoring services for two years. Luke Bernstein, corporate communications officer, said the company notified about 54,000 individuals about the attack.

“We are sorry for any inconvenience this incident may have caused our customers,” said President and CEO, Thomas R. Quinn, Jr. “We have no evidence of any fraud or misuse of any information as a result of this incident. However, we are a community bank, and we are contacting every customer and business that may have been impacted out of an abundance of caution. We take the security of our customers’ information very seriously, and have taken additional steps to prevent future incidents of this nature.”

Although there is no evidence the information was misused, Orrstown is still encouraging affected customers to take advantage of the free services it is providing.

The company is also enhancing its training programs on recognizing and avoiding phishing attacks, as well as helping to educate customers on effective ways to do the same. It added that all consumers should be vigilant and review their account statements.

Orrstown Financial Services Inc. has about $1.6 billion in assets, and provides a variety of consumer and business services in Berks, Cumberland, Dauphin, Franklin, Lancaster, Perry, and York counties, and in Washington County in Maryland. The bank is located on East King Street in Shippensburg.

For more information or to ask questions, call an Orrstown Bank representative at 1-844-405-1027.